General
- Target DOC-D99MGF.zip
- Size 857B
- Sample260804-kajttsga98
- SHA256 89042f1a4d9478db846586e64f2c2dee709964b4265dacc644c31deb4859aae5
- MD5 50835ce9ebeacf9028383c81d01bf48b
- SHA1 3f63ea0b8ef9ed9260b1740d745ff4af2be5f741
- SHA512 3882a4115865191b6fa9e75de1f6a1a3473aa20510f73b29e50766b626444a31765cc5e5909b0ac5354db8cd6bbb7036d2b67fcb8f31cef2f1b3555e81212d89
- TLSH T1CB1196FFF54C1738DE45D2773D222938654AD108A985A445C5D1EE256CCD6B2E3B6404
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-D99MGF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-D99MGF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-D99MGF.lnk
- Size 2KB
- SHA256 8f12f958950fa0be4145d5dc58c98039d33663d144da08a50d1104d3a6d5300b
- MD5 2f0390214c13877bcc34f6b7430b311c
- SHA1 1e44d1a12c0dcade0484e1dc1f10837311a422da
- SHA512 385484fb77f7fa3e591b164c80a932afba1fa872751a0f4b4b7094501fdb0ae6c6797d8474fbd38c09eaa6284399fcdea6bc4f339899a69e8ad6c5e602c33959
- TLSH T1A24168812EF901E4F3BB8E76ECBE2315897B7EA25E64C59D4881810E1822B01D577F23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.